Tool Time: Building Your Cybersecurity Architecture Planning Toolbox
summary
Recommends a practical, repeatable architecture process that uses free/open-source tools (with a licensing caveat for Eramba) to measure effectiveness, maturity and efficiency, then add threat modeling and inventories and design artifacts. Names concrete tools and roles: uses OWASP Threat Dragon for threat models, Archi for ArchiMate diagrams and OpenNMS for network inventory and telemetry, plus Grafana dashboards, a FAIR analyzer and a TCO calculator. Advises documenting decisions (TOGAF ADM / sections 32.2.3–32.2.4) and tracking KPIs so the process improves over time.
AI-written summary · about
chapters (27)
- 0:00Intro
- 1:02Agenda
- 2:24Overview
- 3:34Problem
- 4:45Three "categories" of tools
- 7:23Analytics: Assess current state
- 8:23Effectiveness
- 9:14Maturity
- 10:28Efficiency
- 11:21Analytics: Threat modeling
- 12:18Analytics: Risk assessment frameworks
- 15:11Tools: Gap analysis
- 17:36Tool: Threat modeling
- 19:19Tool: Risk modeling
- 20:15Informational tools
- 21:20Tool: Metrics
- 22:01Tool: Inventory
- 22:39Tool: Network management
- 23:36Tool: Reference
- 24:21Design: Documentation
- 26:33Design: Modeling
- 27:08Tool: Architecture modeling
- 27:49Tool: UML (and ArchiMate) modeling
- 28:39Tool: Mind mapping
- 30:13Tool: Embedded systems modeling
- 32:51Apply What You Have Learned Today
- 34:57References
related talks
27mThe Architect's Guide to Fortifying Software Security
50mMoving Security Architecture from Art to Engineering
58mThreat Modeling In And For Your Organization
01h 00mThreat Modeling for Secure Software Design
50mThreat Modeling With Architectural Risk Patterns
57mUnlocking Threat Modeling
32mThe Art of Secure Architecture
44mImproving Cyber Risk Management with Threat Modeling